CVE-2010-1757: Apple iPhone OS

Medium severity, CVSS 6.4. EPSS: 3.6% chance of exploitation in the next 30 days.

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document.

Affected products

• Apple iPhone OS: before 4.0 (fixed in 4.0)

Published 2010-06-22. Last modified 2026-06-16.